Operator

Operator is a complete Linux (Debian) distribution that runs from a single bootable CD and runs entirely in RAM.

The Operator contains an extensive set of Open Source network security tools that can be used for monitoring and discovering networks.

This virtually can turn any PC into a network security pen-testing device without having to install any software. Operator also contains a set of computer forensic and data recovery tools that can be used to assist you in data retrieval on the local system.

Starting with the 3.3 version of Operator, we have started completely from scratch by installing a basic Debian installation then adding the KNOPPIX functionality afterwards. This allowed us to have more control and understanding of what is on the CD.

Here are some key features of "Operator":

· Debian based Linux Installation
· Linux-Kernel 2.4.31
· KDE V3.3.2-1
· wine Windows Emulator (Binary Emulator)
· Konqueror and Mozilla Firebird Web Browsers
· Koffice which includes korganizer, kword, kspread and more
· X Multimedia System (xmms) an MPEG-video, MP3
· Internet connection software kppp,pppoeconf (DSL)
· utilities for data recovery and system repairs, even for other operating systems
· network and security analysis tools for network administrators
· many programming languages, development tools
· in total more than 900 installed software packages with over 2000 executable user programs and utilities
· 100+ Unix/Windows Exploits and Tools ready to run

What's New in This Release:

· Modified wireless_select to use /proc/net/dev instead of /proc/net/wireless. Some cards were not showing up after they were reinserted like orinoco.
· Added package aim_1.5.286 AOL Instant Messenger
· Stripped down locales to use en_, de_, es_ only
· upgraded hydra-4.6 to hydra-4.7
· Added BusLogic driver to the kernel so that vmware would not panic when booting after an HD install.
· Updated Metasploit framework from 2.3 to 2.4
· reinstalled libnet1-dev
· fixed captive-ntfs
· Added new Exploits:
· HOD-ms05039-pnp-expl - (MS05-039) Microsoft Windows Plug-and-Play Service Remote Overflow
· HOD-kerio-firewall-DoS-expl - Kerio Personal Firewall Multiple IP Options Denial of Service
· HOD-ms04031-netdde-expl - Microsoft Windows NetDDE Remote Buffer Overflow Exploit
· HOD-ms04032-emf-expl - Microsoft Windows Metafile (.emf) Heap Overflow Exploit
· HOD-ms05002-ani-expl - Internet Explorer .ANI files handling Universal Exploit
· HOD-ms05017-msmq-expl - Message Queuing Buffer Overflow Universal Exploit
· DSR-cpanel - POC for Cpanel 5 and below
· cpanel-9x_RCE - POC for Cpanel 9 and below
· DSR-nethack - local exploit for Nethack 3.4.0
· phpLDAPadmin - phpLDAPadmin 0.9.6 - 0.9.7 Remote command Execution
· phpbb.php - phpBB 2.0.10 Remote command Execution
· HP_OV_NNM_RCE - HP OpenView Network Node Manager 6.2, 6.4, 7.01, 7.50 Remote Command Execution
· Added new Tools:
· zebra 0.94 - Tool that manages TCP/IP based routing protocols
· voipong 1.2 dev - VoIP call detector and voice dumper VoIPong is a utility which detects all Voice Over IP calls on a pipeline, and for those which are G711 encoded, dumps actual conversation to seperate wave files. It supports SIP, H323, Cisco's Skinny Client Protocol, RTP and RTCP.
· Upgraded yersinia v0.5.3 to v0.5.6 - Framework for performing layer 2 attacks
· ike-scan v1.2 - Discover and fingerprint IKE hosts (IPsec VPN Servers)